Our express partner will perform scheduled system maintenance from 19th Jan to 3rd Feb, so during this time, all the orders in our webshop will be handled from 4th Feb.
Sorry for any inconvenience caused.

ARQC generation algorithm: Does iCVV play role ?

Algorithm School

Moderator: UNKNwYSHSA

Posts: 1
Joined: Sat May 20, 2017 12:55 pm
Points :18

ARQC generation algorithm: Does iCVV play role ?

Post by Mircea » Sat May 20, 2017 1:26 pm

I need a theoretical answer not a real life one.
From specifications and security papers i read i come to conclusion that if you take 2 new visa bank cards with ATC = 0 and CDOL data all the same and UN from terminal the same number, will both cards generate the same ARQC in this case ? Does iCVV and Card 16 digits play any role in generation algorithm ?

User avatar
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3037

Re: ARQC generation algorithm: Does iCVV play role ?

Post by UNKNwYSHSA » Tue May 23, 2017 6:09 am

The both cards generates different result, they uses different session key. Refer to the specification EMV Book 4.3 2 Security and Key Management:
Session keys KS are derived from unique Master Keys KM using diversification
data R as follows
KS := F(KM)[R]
To prevent replay attacks, the diversification data R should have a high
probability of being different for each session key derivation.

For the rules, please see the specification: EMV x.x Book 2 Security and Key Management.
sense and simplicity

Post Reply Previous topicNext topic

Who is online

Users browsing this forum: No registered users and 1 guest

JavaCard OS : Disclaimer